News Reporter@lemmy.wtfB to

Free OpenSource Software @infosec.pubEnglish · 5 days ago

Abusing Git branch names to compromise a PyPI package

1

cross-posted to:
[email protected]

2

Abusing Git branch names to compromise a PyPI package

News Reporter@lemmy.wtfB to

Free OpenSource Software @infosec.pubEnglish · 5 days ago

1

cross-posted to:
[email protected]

Abusing Git branch names to compromise a PyPI package [LWN.net]

You must log in or register to comment.

Chat

JasminIstMuede@lemmy.blahaj.zone
link
fedilink
English
arrow-up
1·
3 days ago
I’m kind of shocked something like this could even happen. At the very least it’s a lesson in sanitization I suppose.

Free OpenSource Software @infosec.pub

foss@infosec.pub

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

A group for FOSS enthusiasts sharing news and projects on Free and Open Source Software and Operating Systems, including GNU/Linux, Android, applications, and more.

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

42 users / day
155 users / week
517 users / month
683 users / 6 months
4 local subscribers
181 subscribers
630 Posts
99 Comments
Modlog

mods:
TuxBot@infosec.pub